csaf_suse - suse-su-2018:1835-1

Vulnerability from csaf_suse

Published

2018-06-28 09:41

Modified

2018-06-28 09:41

Summary

Security update for tiff

Notes

Title of the patch

Security update for tiff

Description of the patch

This update for tiff fixes the following security issues: - CVE-2017-5225: Prevent heap buffer overflow in the tools/tiffcp that could have caused DoS or code execution via a crafted BitsPerSample value (bsc#1019611) - CVE-2018-7456: Prevent a NULL Pointer dereference in the function TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013 (bsc#1082825) - CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If the value of td_imagelength is set close to the amount of system memory, it will hang the system or trigger the OOM killer (bsc#1082332) - CVE-2016-10266: Prevent remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22 (bsc#1031263) - CVE-2018-8905: Prevent heap-based buffer overflow in the function LZWDecodeCompat via a crafted TIFF file (bsc#1086408) - CVE-2016-9540: Prevent out-of-bounds write on tiled images with odd tile width versus image width (bsc#1011839). - CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846). - CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846). - Removed assert in readSeparateTilesIntoBuffer() function (bsc#1017689). - CVE-2016-10095: Prevent stack-based buffer overflow in the _TIFFVGetField function that allowed remote attackers to cause a denial of service (crash) via a crafted TIFF file (bsc#1017690). - CVE-2016-8331: Prevent remote code execution because of incorrect handling of TIFF images. A crafted TIFF document could have lead to a type confusion vulnerability resulting in remote code execution. This vulnerability could have been be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality (bsc#1007276). - CVE-2016-3632: The _TIFFVGetField function allowed remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image (bsc#974621).

Patchnames

sdksp4-tiff-13683,slessp4-tiff-13683

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for tiff",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for tiff fixes the following security issues:\n\n- CVE-2017-5225: Prevent heap buffer overflow in the tools/tiffcp that could\n  have caused DoS or code execution via a crafted BitsPerSample value\n  (bsc#1019611)\n- CVE-2018-7456: Prevent a NULL Pointer dereference in the function\n  TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF\n  information, a different vulnerability than CVE-2017-18013 (bsc#1082825)\n- CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During\n  the TIFFOpen process, td_imagelength is not checked. The value of\n  td_imagelength can be directly controlled by an input file. In the\n  ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called\n  based on td_imagelength. If the value of td_imagelength is set close to the\n  amount of system memory, it will hang the system or trigger the OOM killer\n  (bsc#1082332)\n- CVE-2016-10266: Prevent remote attackers to cause a denial of service\n  (divide-by-zero error and application crash) via a crafted TIFF image, related\n  to libtiff/tif_read.c:351:22 (bsc#1031263)\n- CVE-2018-8905: Prevent heap-based buffer overflow in the function\n  LZWDecodeCompat via a crafted TIFF file (bsc#1086408)\n- CVE-2016-9540: Prevent out-of-bounds write on tiled images with odd tile\n  width versus image width (bsc#1011839).\n- CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have\n  lead to assertion failures in debug mode, or buffer overflows in release mode,\n  when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846).\n- CVE-2016-9535: tif_predict.h and tif_predict.c had assertions that could have\n  lead to assertion failures in debug mode, or buffer overflows in release mode,\n  when dealing with unusual tile size like YCbCr with subsampling (bsc#1011846).\n- Removed assert in readSeparateTilesIntoBuffer() function (bsc#1017689).\n- CVE-2016-10095: Prevent stack-based buffer overflow in the _TIFFVGetField\n  function that allowed remote attackers to cause a denial of service (crash) via\n  a crafted TIFF file (bsc#1017690).\n- CVE-2016-8331: Prevent remote code execution because of incorrect handling of\n  TIFF images. A crafted TIFF document could have lead to a type confusion\n  vulnerability resulting in remote code execution. This vulnerability could have\n  been be triggered via a TIFF file delivered to the application using LibTIFF\u0027s\n  tag extension functionality (bsc#1007276).\n- CVE-2016-3632: The _TIFFVGetField function allowed remote attackers to cause\n  a denial of service (out-of-bounds write) or execute arbitrary code via a\n  crafted TIFF image (bsc#974621).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sdksp4-tiff-13683,slessp4-tiff-13683",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1835-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:1835-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181835-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:1835-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-June/004228.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1007276",
        "url": "https://bugzilla.suse.com/1007276"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011839",
        "url": "https://bugzilla.suse.com/1011839"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011846",
        "url": "https://bugzilla.suse.com/1011846"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017689",
        "url": "https://bugzilla.suse.com/1017689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017690",
        "url": "https://bugzilla.suse.com/1017690"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1019611",
        "url": "https://bugzilla.suse.com/1019611"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031263",
        "url": "https://bugzilla.suse.com/1031263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082332",
        "url": "https://bugzilla.suse.com/1082332"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082825",
        "url": "https://bugzilla.suse.com/1082825"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1086408",
        "url": "https://bugzilla.suse.com/1086408"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 974621",
        "url": "https://bugzilla.suse.com/974621"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8128 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8128/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7554 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7554/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10095 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10095/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10266 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10266/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-3632 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-3632/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8331 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8331/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9535 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9535/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9540 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9540/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-11613 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-11613/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5225 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5225/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7456 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7456/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-8905 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-8905/"
      }
    ],
    "title": "Security update for tiff",
    "tracking": {
      "current_release_date": "2018-06-28T09:41:44Z",
      "generator": {
        "date": "2018-06-28T09:41:44Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:1835-1",
      "initial_release_date": "2018-06-28T09:41:44Z",
      "revision_history": [
        {
          "date": "2018-06-28T09:41:44Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.9.1.i586",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.9.1.i586",
                  "product_id": "libtiff-devel-3.8.2-141.169.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.9.1.i586",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.9.1.i586",
                  "product_id": "libtiff3-3.8.2-141.169.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.9.1.i586",
                "product": {
                  "name": "tiff-3.8.2-141.169.9.1.i586",
                  "product_id": "tiff-3.8.2-141.169.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.9.1.ia64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.9.1.ia64",
                  "product_id": "libtiff-devel-3.8.2-141.169.9.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.9.1.ia64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.9.1.ia64",
                  "product_id": "libtiff3-3.8.2-141.169.9.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-x86-3.8.2-141.169.9.1.ia64",
                "product": {
                  "name": "libtiff3-x86-3.8.2-141.169.9.1.ia64",
                  "product_id": "libtiff3-x86-3.8.2-141.169.9.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.9.1.ia64",
                "product": {
                  "name": "tiff-3.8.2-141.169.9.1.ia64",
                  "product_id": "tiff-3.8.2-141.169.9.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.9.1.ppc64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.9.1.ppc64",
                  "product_id": "libtiff-devel-3.8.2-141.169.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.9.1.ppc64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.9.1.ppc64",
                  "product_id": "libtiff3-3.8.2-141.169.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.9.1.ppc64",
                "product": {
                  "name": "tiff-3.8.2-141.169.9.1.ppc64",
                  "product_id": "tiff-3.8.2-141.169.9.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.9.1.s390x",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.9.1.s390x",
                  "product_id": "libtiff-devel-3.8.2-141.169.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.9.1.s390x",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.9.1.s390x",
                  "product_id": "libtiff3-3.8.2-141.169.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.9.1.s390x",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.9.1.s390x",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.9.1.s390x",
                "product": {
                  "name": "tiff-3.8.2-141.169.9.1.s390x",
                  "product_id": "tiff-3.8.2-141.169.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libtiff-devel-3.8.2-141.169.9.1.x86_64",
                "product": {
                  "name": "libtiff-devel-3.8.2-141.169.9.1.x86_64",
                  "product_id": "libtiff-devel-3.8.2-141.169.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64",
                "product": {
                  "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64",
                  "product_id": "libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-3.8.2-141.169.9.1.x86_64",
                "product": {
                  "name": "libtiff3-3.8.2-141.169.9.1.x86_64",
                  "product_id": "libtiff3-3.8.2-141.169.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
                "product": {
                  "name": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
                  "product_id": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "tiff-3.8.2-141.169.9.1.x86_64",
                "product": {
                  "name": "tiff-3.8.2-141.169.9.1.x86_64",
                  "product_id": "tiff-3.8.2-141.169.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:suse:sle-sdk:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.9.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff-devel-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff3-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libtiff3-x86-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "libtiff3-x86-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tiff-3.8.2-141.169.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64"
        },
        "product_reference": "tiff-3.8.2-141.169.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8128",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8128"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8128",
          "url": "https://www.suse.com/security/cve/CVE-2014-8128"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007276 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/1007276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017690 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/1017690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040322 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/1040322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206220 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/1206220"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914890 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/914890"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 916925 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/916925"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 942690 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/942690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960341 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/960341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 969783 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/969783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974621 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/974621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983436 for CVE-2014-8128",
          "url": "https://bugzilla.suse.com/983436"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2014-8128"
    },
    {
      "cve": "CVE-2015-7554",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7554"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7554",
          "url": "https://www.suse.com/security/cve/CVE-2015-7554"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007276 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/1007276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017690 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/1017690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040322 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/1040322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960341 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/960341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974621 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/974621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983436 for CVE-2015-7554",
          "url": "https://bugzilla.suse.com/983436"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-7554"
    },
    {
      "cve": "CVE-2016-10095",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10095"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10095",
          "url": "https://www.suse.com/security/cve/CVE-2016-10095"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017690 for CVE-2016-10095",
          "url": "https://bugzilla.suse.com/1017690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960341 for CVE-2016-10095",
          "url": "https://bugzilla.suse.com/960341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983436 for CVE-2016-10095",
          "url": "https://bugzilla.suse.com/983436"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10095"
    },
    {
      "cve": "CVE-2016-10266",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10266"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10266",
          "url": "https://www.suse.com/security/cve/CVE-2016-10266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017694 for CVE-2016-10266",
          "url": "https://bugzilla.suse.com/1017694"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031263 for CVE-2016-10266",
          "url": "https://bugzilla.suse.com/1031263"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10266"
    },
    {
      "cve": "CVE-2016-3632",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-3632"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-3632",
          "url": "https://www.suse.com/security/cve/CVE-2016-3632"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007276 for CVE-2016-3632",
          "url": "https://bugzilla.suse.com/1007276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974621 for CVE-2016-3632",
          "url": "https://bugzilla.suse.com/974621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983436 for CVE-2016-3632",
          "url": "https://bugzilla.suse.com/983436"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-3632"
    },
    {
      "cve": "CVE-2016-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5318",
          "url": "https://www.suse.com/security/cve/CVE-2016-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007276 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/1007276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017690 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/1017690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1040322 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/1040322"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960341 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/960341"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 974621 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/974621"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983436 for CVE-2016-5318",
          "url": "https://bugzilla.suse.com/983436"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5318"
    },
    {
      "cve": "CVE-2016-8331",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8331"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF\u0027s tag extension functionality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8331",
          "url": "https://www.suse.com/security/cve/CVE-2016-8331"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007276 for CVE-2016-8331",
          "url": "https://bugzilla.suse.com/1007276"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-8331"
    },
    {
      "cve": "CVE-2016-9535",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9535"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka \"Predictor heap-buffer-overflow.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9535",
          "url": "https://www.suse.com/security/cve/CVE-2016-9535"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011846 for CVE-2016-9535",
          "url": "https://bugzilla.suse.com/1011846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013308 for CVE-2016-9535",
          "url": "https://bugzilla.suse.com/1013308"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9535"
    },
    {
      "cve": "CVE-2016-9540",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9540"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka \"cpStripToTile heap-buffer-overflow.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9540",
          "url": "https://www.suse.com/security/cve/CVE-2016-9540"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011839 for CVE-2016-9540",
          "url": "https://bugzilla.suse.com/1011839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013308 for CVE-2016-9540",
          "url": "https://bugzilla.suse.com/1013308"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9540"
    },
    {
      "cve": "CVE-2017-11613",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-11613"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-11613",
          "url": "https://www.suse.com/security/cve/CVE-2017-11613"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082332 for CVE-2017-11613",
          "url": "https://bugzilla.suse.com/1082332"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106853 for CVE-2017-11613",
          "url": "https://bugzilla.suse.com/1106853"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-11613"
    },
    {
      "cve": "CVE-2017-5225",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5225"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5225",
          "url": "https://www.suse.com/security/cve/CVE-2017-5225"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1019611 for CVE-2017-5225",
          "url": "https://bugzilla.suse.com/1019611"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5225"
    },
    {
      "cve": "CVE-2018-7456",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7456"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7456",
          "url": "https://www.suse.com/security/cve/CVE-2018-7456"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074317 for CVE-2018-7456",
          "url": "https://bugzilla.suse.com/1074317"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1082825 for CVE-2018-7456",
          "url": "https://bugzilla.suse.com/1082825"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-7456"
    },
    {
      "cve": "CVE-2018-8905",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-8905"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-8905",
          "url": "https://www.suse.com/security/cve/CVE-2018-8905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1086408 for CVE-2018-8905",
          "url": "https://bugzilla.suse.com/1086408"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-32bit-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libtiff3-x86-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:tiff-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.i586",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ia64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-3.8.2-141.169.9.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.ppc64",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 11 SP4:libtiff-devel-32bit-3.8.2-141.169.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-06-28T09:41:44Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-8905"
    }
  ]
}

cve-2016-5318

Vulnerability from cvelistv5

Published

2017-01-20 15:00

Modified

2024-08-06 01:00

Severity ?

Summary

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.

References

▼	URL	Tags
	https://usn.ubuntu.com/3606-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/88604	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/04/27/6	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/07/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:59.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3606-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3606-1/"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "88604",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/88604"
          },
          {
            "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
          },
          {
            "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-27T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3606-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3606-1/"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "88604",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/88604"
        },
        {
          "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
        },
        {
          "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-5318",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3606-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3606-1/"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "88604",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/88604"
            },
            {
              "name": "[oss-security] 20160427 3 bugs refer to buffer overflow in in libtiff 4.0.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/27/6"
            },
            {
              "name": "[oss-security] 20160606 3 bugs refer to buffer overflow in in libtiff 4.0.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/06/07/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-5318",
    "datePublished": "2017-01-20T15:00:00",
    "dateReserved": "2016-06-06T00:00:00",
    "dateUpdated": "2024-08-06T01:00:59.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-11613

Vulnerability from cvelistv5

Published

2017-07-26 08:00

Modified

2024-08-05 18:12

Severity ?

Summary

In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/99977	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3606-1/	vendor-advisory, x_refsource_UBUNTU
	https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4349	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:12:40.627Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99977",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99977"
          },
          {
            "name": "USN-3606-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3606-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f"
          },
          {
            "name": "[debian-lts-announce] 20180531 [SECURITY] [DLA 1391-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html"
          },
          {
            "name": "DSA-4349",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4349"
          },
          {
            "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "99977",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99977"
        },
        {
          "name": "USN-3606-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3606-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f"
        },
        {
          "name": "[debian-lts-announce] 20180531 [SECURITY] [DLA 1391-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html"
        },
        {
          "name": "DSA-4349",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4349"
        },
        {
          "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-11613",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99977",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99977"
            },
            {
              "name": "USN-3606-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3606-1/"
            },
            {
              "name": "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f",
              "refsource": "MISC",
              "url": "https://gist.github.com/dazhouzhou/1a3b7400547f23fe316db303ab9b604f"
            },
            {
              "name": "[debian-lts-announce] 20180531 [SECURITY] [DLA 1391-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html"
            },
            {
              "name": "DSA-4349",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4349"
            },
            {
              "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-11613",
    "datePublished": "2017-07-26T08:00:00",
    "dateReserved": "2017-07-25T00:00:00",
    "dateUpdated": "2024-08-05T18:12:40.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-8905

Vulnerability from cvelistv5

Published

2018-03-22 04:00

Modified

2024-08-05 07:10

Severity ?

Summary

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

References

▼	URL	Tags
	http://bugzilla.maptools.org/show_bug.cgi?id=2780	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html	mailing-list, x_refsource_MLIST
	https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow	x_refsource_MISC
	https://usn.ubuntu.com/3864-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4349	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html	mailing-list, x_refsource_MLIST
	https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:2053	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:10:46.630Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2780"
          },
          {
            "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1378-1] tiff3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html"
          },
          {
            "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1377-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow"
          },
          {
            "name": "USN-3864-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3864-1/"
          },
          {
            "name": "DSA-4349",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4349"
          },
          {
            "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d"
          },
          {
            "name": "RHSA-2019:2053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2053"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-03-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-08-06T16:06:33",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2780"
        },
        {
          "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1378-1] tiff3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html"
        },
        {
          "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1377-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow"
        },
        {
          "name": "USN-3864-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3864-1/"
        },
        {
          "name": "DSA-4349",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4349"
        },
        {
          "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d"
        },
        {
          "name": "RHSA-2019:2053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2053"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-8905",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2780",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2780"
            },
            {
              "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1378-1] tiff3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00009.html"
            },
            {
              "name": "[debian-lts-announce] 20180514 [SECURITY] [DLA 1377-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00008.html"
            },
            {
              "name": "https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow",
              "refsource": "MISC",
              "url": "https://github.com/halfbitteam/POCs/tree/master/libtiff-4.08_tiff2ps_heap_overflow"
            },
            {
              "name": "USN-3864-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3864-1/"
            },
            {
              "name": "DSA-4349",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4349"
            },
            {
              "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
            },
            {
              "name": "https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d",
              "refsource": "CONFIRM",
              "url": "https://gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d"
            },
            {
              "name": "RHSA-2019:2053",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2053"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-8905",
    "datePublished": "2018-03-22T04:00:00",
    "dateReserved": "2018-03-21T00:00:00",
    "dateUpdated": "2024-08-05T07:10:46.630Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-10095

Vulnerability from cvelistv5

Published

2017-03-01 15:00

Modified

2024-08-06 03:07

Severity ?

Summary

Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/95178	vdb-entry, x_refsource_BID
	http://bugzilla.maptools.org/show_bug.cgi?id=2625	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/01/7	mailing-list, x_refsource_MLIST
	https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2017/01/01/11	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2017/dsa-3903	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:32.130Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95178",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95178"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2625"
          },
          {
            "name": "[oss-security] 20170101 libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/01/7"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/"
          },
          {
            "name": "[oss-security] 20170101 Re: libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/01/11"
          },
          {
            "name": "DSA-3903",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3903"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-29T19:38:54",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95178",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95178"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2625"
        },
        {
          "name": "[oss-security] 20170101 libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/01/7"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/"
        },
        {
          "name": "[oss-security] 20170101 Re: libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/01/11"
        },
        {
          "name": "DSA-3903",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3903"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95178",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95178"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2625",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2625"
            },
            {
              "name": "[oss-security] 20170101 libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/01/7"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c/"
            },
            {
              "name": "[oss-security] 20170101 Re: libtiff: stack-based buffer overflow in _TIFFVGetField (tif_dir.c)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/01/11"
            },
            {
              "name": "DSA-3903",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3903"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10095",
    "datePublished": "2017-03-01T15:00:00",
    "dateReserved": "2017-01-01T00:00:00",
    "dateUpdated": "2024-08-06T03:07:32.130Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-9535

Vulnerability from cvelistv5

Published

2016-11-22 19:00

Modified

2024-08-06 02:50

Severity ?

Summary

tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1	x_refsource_CONFIRM
	https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0225.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/94744	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/94484	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:50:38.565Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3844",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3844"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33"
          },
          {
            "name": "RHSA-2017:0225",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
          },
          {
            "name": "94744",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94744"
          },
          {
            "name": "94484",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94484"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka \"Predictor heap-buffer-overflow.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3844",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3844"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33"
        },
        {
          "name": "RHSA-2017:0225",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
        },
        {
          "name": "94744",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94744"
        },
        {
          "name": "94484",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94484"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9535",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka \"Predictor heap-buffer-overflow.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3844",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3844"
            },
            {
              "name": "https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1",
              "refsource": "CONFIRM",
              "url": "https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1"
            },
            {
              "name": "https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33",
              "refsource": "CONFIRM",
              "url": "https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33"
            },
            {
              "name": "RHSA-2017:0225",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
            },
            {
              "name": "94744",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94744"
            },
            {
              "name": "94484",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94484"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9535",
    "datePublished": "2016-11-22T19:00:00",
    "dateReserved": "2016-11-21T00:00:00",
    "dateUpdated": "2024-08-06T02:50:38.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-10266

Vulnerability from cvelistv5

Published

2017-03-24 19:00

Modified

2024-08-06 03:14

Severity ?

Summary

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3602-1/	vendor-advisory, x_refsource_UBUNTU
	https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero	x_refsource_MISC
	http://www.securityfocus.com/bid/97115	vdb-entry, x_refsource_BID
	https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.922Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3844",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3844"
          },
          {
            "name": "USN-3602-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3602-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero"
          },
          {
            "name": "97115",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97115"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-03-21T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3844",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3844"
        },
        {
          "name": "USN-3602-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3602-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero"
        },
        {
          "name": "97115",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97115"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10266",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3844",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3844"
            },
            {
              "name": "USN-3602-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3602-1/"
            },
            {
              "name": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero",
              "refsource": "MISC",
              "url": "https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero"
            },
            {
              "name": "97115",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97115"
            },
            {
              "name": "https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1",
              "refsource": "MISC",
              "url": "https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10266",
    "datePublished": "2017-03-24T19:00:00",
    "dateReserved": "2017-03-24T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.922Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2015-7554

Vulnerability from cvelistv5

Published

2016-01-08 19:00

Modified

2024-08-06 07:51

Severity ?

Summary

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-1547.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/79699	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/archive/1/537205/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://seclists.org/fulldisclosure/2015/Dec/119	mailing-list, x_refsource_FULLDISC
	http://rhn.redhat.com/errata/RHSA-2016-1546.html	vendor-advisory, x_refsource_REDHAT
	http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/12/26/7	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:51:28.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "openSUSE-SU-2016:0212",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html"
          },
          {
            "name": "RHSA-2016:1547",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "79699",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/79699"
          },
          {
            "name": "openSUSE-SU-2016:0215",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "20151226 libtiff: invalid write (CVE-2015-7554)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/537205/100/0/threaded"
          },
          {
            "name": "20151226 libtiff: invalid write (CVE-2015-7554)",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Dec/119"
          },
          {
            "name": "RHSA-2016:1546",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html"
          },
          {
            "name": "openSUSE-SU-2016:0252",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html"
          },
          {
            "name": "[oss-security] 20151226 libtiff: invalid write (CVE-2015-7554)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/12/26/7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-12-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "openSUSE-SU-2016:0212",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00078.html"
        },
        {
          "name": "RHSA-2016:1547",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "79699",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/79699"
        },
        {
          "name": "openSUSE-SU-2016:0215",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00081.html"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "20151226 libtiff: invalid write (CVE-2015-7554)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/537205/100/0/threaded"
        },
        {
          "name": "20151226 libtiff: invalid write (CVE-2015-7554)",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Dec/119"
        },
        {
          "name": "RHSA-2016:1546",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html"
        },
        {
          "name": "openSUSE-SU-2016:0252",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-01/msg00100.html"
        },
        {
          "name": "[oss-security] 20151226 libtiff: invalid write (CVE-2015-7554)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/12/26/7"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-7554",
    "datePublished": "2016-01-08T19:00:00",
    "dateReserved": "2015-09-29T00:00:00",
    "dateUpdated": "2024-08-06T07:51:28.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-3632

Vulnerability from cvelistv5

Published

2016-09-21 18:00

Modified

2024-08-06 00:03

Severity ?

Summary

The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.

References

▼	URL	Tags
	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1547.html	vendor-advisory, x_refsource_REDHAT
	http://bugzilla.maptools.org/show_bug.cgi?id=2549	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/04/08/9	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/85953	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2016-1546.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/85960	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1325095	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:03:34.364Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "RHSA-2016:1547",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2549"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "[oss-security] 20160408 CVE-2016-3632 - libtiff 4.0.6 illegel write",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/04/08/9"
          },
          {
            "name": "85953",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85953"
          },
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "RHSA-2016:1546",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
          },
          {
            "name": "85960",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/85960"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325095"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "RHSA-2016:1547",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2549"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "[oss-security] 20160408 CVE-2016-3632 - libtiff 4.0.6 illegel write",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/04/08/9"
        },
        {
          "name": "85953",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85953"
        },
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "RHSA-2016:1546",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
        },
        {
          "name": "85960",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/85960"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325095"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-3632",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "RHSA-2016:1547",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1547.html"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2549",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2549"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
            },
            {
              "name": "[oss-security] 20160408 CVE-2016-3632 - libtiff 4.0.6 illegel write",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/04/08/9"
            },
            {
              "name": "85953",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85953"
            },
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "RHSA-2016:1546",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1546.html"
            },
            {
              "name": "85960",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/85960"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1325095",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1325095"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-3632",
    "datePublished": "2016-09-21T18:00:00",
    "dateReserved": "2016-03-22T00:00:00",
    "dateUpdated": "2024-08-06T00:03:34.364Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2014-8128

Vulnerability from cvelistv5

Published

2020-02-12 02:15

Modified

2024-08-06 13:10

Severity ?

Summary

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

References

▼	URL	Tags
	http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt	x_refsource_MISC
	http://openwall.com/lists/oss-security/2015/01/24/15	x_refsource_MISC
	http://support.apple.com/kb/HT204941	x_refsource_MISC
	http://support.apple.com/kb/HT204942	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1185812	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	LibTIFF	Version: prior to 4.0.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:51.039Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2015/01/24/15"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204941"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT204942"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185812"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "LibTIFF",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 4.0.4"
            }
          ]
        }
      ],
      "datePublic": "2015-06-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Other",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-12T02:15:44",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.conostix.com/pub/adv/CVE-2014-8128-LibTIFF-Out-of-bounds_Writes.txt"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2015/01/24/15"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://support.apple.com/kb/HT204941"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://support.apple.com/kb/HT204942"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1185812"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8128",
    "datePublished": "2020-02-12T02:15:44",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:51.039Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-8331

Vulnerability from cvelistv5

Published

2016-10-28 20:00

Modified

2024-08-06 02:20

Severity ?

8.1 (High) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201701-16	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/93898	vdb-entry, x_refsource_BID
	http://www.talosintelligence.com/reports/TALOS-2016-0190/	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	LibTIFF 4.0.6	Version: LibTIFF 4.0.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:20:30.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201701-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-16"
          },
          {
            "name": "93898",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93898"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.talosintelligence.com/reports/TALOS-2016-0190/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "LibTIFF 4.0.6",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "LibTIFF 4.0.6"
            }
          ]
        }
      ],
      "datePublic": "2016-10-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF\u0027s tag extension functionality."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "type confusion",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-19T19:16:19",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "name": "GLSA-201701-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-16"
        },
        {
          "name": "93898",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93898"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.talosintelligence.com/reports/TALOS-2016-0190/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "talos-cna@cisco.com",
          "ID": "CVE-2016-8331",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "LibTIFF 4.0.6",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "LibTIFF 4.0.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF\u0027s tag extension functionality."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": 8.1,
            "baseSeverity": "High",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "type confusion"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201701-16",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-16"
            },
            {
              "name": "93898",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/93898"
            },
            {
              "name": "http://www.talosintelligence.com/reports/TALOS-2016-0190/",
              "refsource": "MISC",
              "url": "http://www.talosintelligence.com/reports/TALOS-2016-0190/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2016-8331",
    "datePublished": "2016-10-28T20:00:00",
    "dateReserved": "2016-09-28T00:00:00",
    "dateUpdated": "2024-08-06T02:20:30.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-9540

Vulnerability from cvelistv5

Published

2016-11-22 19:00

Modified

2024-08-06 02:50

Severity ?

Summary

tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."

References

▼	URL	Tags
	https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94747	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0225.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/94484	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3762	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:50:38.381Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3"
          },
          {
            "name": "94747",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94747"
          },
          {
            "name": "RHSA-2017:0225",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
          },
          {
            "name": "94484",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94484"
          },
          {
            "name": "DSA-3762",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3762"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka \"cpStripToTile heap-buffer-overflow.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3"
        },
        {
          "name": "94747",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94747"
        },
        {
          "name": "RHSA-2017:0225",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
        },
        {
          "name": "94484",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94484"
        },
        {
          "name": "DSA-3762",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3762"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9540",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka \"cpStripToTile heap-buffer-overflow.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3",
              "refsource": "CONFIRM",
              "url": "https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3"
            },
            {
              "name": "94747",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94747"
            },
            {
              "name": "RHSA-2017:0225",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0225.html"
            },
            {
              "name": "94484",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94484"
            },
            {
              "name": "DSA-3762",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3762"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9540",
    "datePublished": "2016-11-22T19:00:00",
    "dateReserved": "2016-11-21T00:00:00",
    "dateUpdated": "2024-08-06T02:50:38.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5225

Vulnerability from cvelistv5

Published

2017-01-12 11:00

Modified

2024-08-05 14:55

Severity ?

Summary

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.

References

▼	URL	Tags
	http://www.debian.org/security/2017/dsa-3844	vendor-advisory, x_refsource_DEBIAN
	https://security.gentoo.org/glsa/201709-27	vendor-advisory, x_refsource_GENTOO
	http://bugzilla.maptools.org/show_bug.cgi?id=2656	x_refsource_CONFIRM
	http://bugzilla.maptools.org/show_bug.cgi?id=2657	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037911	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/95413	vdb-entry, x_refsource_BID
	https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.558Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3844",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3844"
          },
          {
            "name": "GLSA-201709-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201709-27"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2656"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2657"
          },
          {
            "name": "1037911",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037911"
          },
          {
            "name": "95413",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95413"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3844",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3844"
        },
        {
          "name": "GLSA-201709-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201709-27"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2656"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2657"
        },
        {
          "name": "1037911",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037911"
        },
        {
          "name": "95413",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95413"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5225",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3844",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3844"
            },
            {
              "name": "GLSA-201709-27",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201709-27"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2656",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2656"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2657",
              "refsource": "CONFIRM",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2657"
            },
            {
              "name": "1037911",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037911"
            },
            {
              "name": "95413",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95413"
            },
            {
              "name": "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7",
              "refsource": "CONFIRM",
              "url": "https://github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5225",
    "datePublished": "2017-01-12T11:00:00",
    "dateReserved": "2017-01-09T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-7456

Vulnerability from cvelistv5

Published

2018-02-24 06:00

Modified

2024-08-05 06:24

Severity ?

Summary

A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)

References

▼	URL	Tags
	https://lists.debian.org/debian-lts-announce/2018/04/msg00011.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3864-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4349	vendor-advisory, x_refsource_DEBIAN
	https://github.com/xiaoqx/pocs/tree/master/libtiff	x_refsource_MISC
	http://bugzilla.maptools.org/show_bug.cgi?id=2778	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/04/msg00010.html	mailing-list, x_refsource_MLIST
	https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:2051	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2053	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:24:12.048Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1347-1] tiff3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00011.html"
          },
          {
            "name": "USN-3864-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3864-1/"
          },
          {
            "name": "DSA-4349",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4349"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/xiaoqx/pocs/tree/master/libtiff"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2778"
          },
          {
            "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
          },
          {
            "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1346-1] tiff security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00010.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b"
          },
          {
            "name": "RHSA-2019:2051",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2051"
          },
          {
            "name": "RHSA-2019:2053",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2053"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-29T19:42:18",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1347-1] tiff3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00011.html"
        },
        {
          "name": "USN-3864-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3864-1/"
        },
        {
          "name": "DSA-4349",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4349"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/xiaoqx/pocs/tree/master/libtiff"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2778"
        },
        {
          "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
        },
        {
          "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1346-1] tiff security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00010.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b"
        },
        {
          "name": "RHSA-2019:2051",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2051"
        },
        {
          "name": "RHSA-2019:2053",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2053"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-7456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1347-1] tiff3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00011.html"
            },
            {
              "name": "USN-3864-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3864-1/"
            },
            {
              "name": "DSA-4349",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4349"
            },
            {
              "name": "https://github.com/xiaoqx/pocs/tree/master/libtiff",
              "refsource": "MISC",
              "url": "https://github.com/xiaoqx/pocs/tree/master/libtiff"
            },
            {
              "name": "http://bugzilla.maptools.org/show_bug.cgi?id=2778",
              "refsource": "MISC",
              "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2778"
            },
            {
              "name": "[debian-lts-announce] 20180702 [SECURITY] [DLA 1411-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html"
            },
            {
              "name": "[debian-lts-announce] 20180416 [SECURITY] [DLA 1346-1] tiff security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00010.html"
            },
            {
              "name": "https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b",
              "refsource": "CONFIRM",
              "url": "https://gitlab.com/libtiff/libtiff/commit/be4c85b16e8801a16eec25e80eb9f3dd6a96731b"
            },
            {
              "name": "RHSA-2019:2051",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2051"
            },
            {
              "name": "RHSA-2019:2053",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2053"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7456",
    "datePublished": "2018-02-24T06:00:00",
    "dateReserved": "2018-02-23T00:00:00",
    "dateUpdated": "2024-08-05T06:24:12.048Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature